Privacy Policy

Last updated: July 23, 2026

372 Labs Inc.(“372 Labs,” “we,” “us,” or “our”) operates Groupiez, a local niche-fan discovery platform on the web and in mobile apps. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Groupiez, you agree to this policy.

Information we collect

We collect information you provide and data generated when you use the service:

Account data: email address, password (stored hashed) when you use email sign-in, phone number when verified, account tier, and verification status. If you use Sign in with Apple (or other supported third-party sign-in), we receive the identifiers and profile fields that provider shares with us (which may include a relay email address).
Profile data: display name, bio, avatar, pinned artists, optional social handles (such as Instagram, TikTok, or X), profile themes and badges (Plus), and optional connected music accounts.
Taste and affinity data: artist pins, listening history synced from connected services, and similarity scores used for matching.
Location data: home metro and neighborhood bucket. We may use device location to suggest your metro during onboarding, but we do not show exact coordinates to other users.
Event attendance: when you mark upcoming or past shows as interested or going (displayed as “went” after the show). Aggregate counts may appear on event pages; your individual status is shared with other users only according to your concert activity privacy setting.
Concert logs and ticket import: shows you log (artist, venue, date, rating, notes), privacy tier (public, hybrid, or private), verification status, and ticket images or forwarded ticket emails you submit for import review.
Social and messaging data: intro requests, accepted matches, friend connections, and messages sent after a match is accepted. We do not allow cold direct messages.
User-generated content: reviews, comments in artist rooms, reports, and blocks.
Device and push data: push notification tokens, device type, and app version for delivering alerts you opt into.
Usage data: basic logs of how you interact with features (for example pages viewed and actions taken) to improve the product, secure the service, and troubleshoot issues.

How we use your information

Match you with fans who share your taste in your metro.
Power discovery features, artist rooms, and concert overlap signals.
Process ticket scans and inbound ticket emails into draft concert logs for your review.
Moderate user-generated content and enforce community rules.
Send transactional emails and push notifications you have consented to receive.
Show first-party, in-app promotions relevant to your metro and taste on free accounts. We do not sell your personal data to ad brokers or use connected music data for off-platform advertising without your permission.
Operate paid tiers and professional tools for artists and venues.
Secure the service, prevent abuse, and comply with legal obligations.

App Store purchases and refunds

If you subscribe to GroupiezPlus (or other paid features) through Apple's App Store, Apple processes payment, billing, and refund requests under Apple's terms and privacy practices.

Apple may ask developers to share limited information about how a customer used a purchased subscription or in-app product when reviewing a refund request (Apple's consumption information process). We do not currently send that consumption information to Apple.

If we later participate in that process, we will only share such information with Apple after you give separate, affirmative consent in the app (for example, a clear opt-in), and you will be able to withdraw that consent at any time. We will not use Apple's App Tracking Transparency prompt for this purpose. Until you consent — or if you withdraw consent — we will not send your consumption data to Apple for refund review.

For access or deletion requests related to data Apple holds, you may also contact Apple at privacy.apple.com.

Connected music accounts

When you connect optional music services or import listening history, we process that data to build your taste profile and show overlap with other users. Supported options may include Last.fm, Spotify data export import, and Apple Music (MusicKit) on iOS. Depending on the service, we may store artist lists, play counts or ranks, sync timestamps, and connection metadata — not your full music library files. For Apple Music, authorization happens on your device; we do not store your Apple Music User Token on our servers for the current import flow.

We display this data according to your in-app privacy settings and the terms of the connected service. You can disconnect a service in the app to stop future imports; disconnecting may remove taste data imported from that source. We do not export connected music data to third-party ad networks.

Ticketmaster event listings

Some show listings on Groupiez are supplied by the Ticketmaster Discovery API. For those events we receive and store factual event information — such as event name, date and time, venue, lineup, price range, ticket link, and promotional images — in our database so we can display upcoming shows and link you to official tickets on ticketmaster.com. We refresh this data on a regular schedule and remove it when required by Ticketmaster or the event rights holder.

Ticketmaster Event Content is owned by event organizers and/or Ticketmaster. We do not sell tickets on Groupiez; when you tap “Official tickets,” you leave our app and complete your purchase on Ticketmaster's website under Ticketmaster's own terms and privacy policy.

We do not share your personal account data with Ticketmaster when displaying these listings. If you follow a ticket link, Ticketmaster's site may collect information according to its policies.

Event catalog data

We compile public event listings from venues, partner APIs, community calendars, and automated ingestion. That catalog data describes shows — not your personal information. Listings may be incomplete or out of date; see our Terms for accuracy disclaimers.

Location privacy

Other users see your metro and neighborhood bucket only — never your precise GPS coordinates or street address. Concert logs follow your chosen privacy tier: public logs may show show details; hybrid logs may show overlap counts without full detail; private logs are visible only to you. Event pages show aggregate interested/going counts for everyone. People outside your RSVP audience see you as an anonymous fan; allowed viewers see your name and going/interested status. Named overlap appears only in match cards, activity feeds, and intro flows according to your settings.

How we share information

We do not sell your personal information. We share data only as described below:

Service providers: hosting, database, authentication, storage, email delivery, push delivery, analytics, and other infrastructure partners that help us operate the service under contractual confidentiality obligations where applicable. This includes providers such as Supabase (backend and auth), Stripe (web payments), Apple (App Store billing), and RevenueCat (helping us manage App Store subscriptions and entitlements).
Payment processors: if you purchase Plus on the web, Stripe processes your payment. If you purchase through the iOS app, Apple processes the payment via the App Store; we may use RevenueCat to receive subscription status and sync your Plus entitlement to your account. We do not store full card numbers on Groupiez servers.
Sign-in providers: if you choose Sign in with Apple (or another supported provider), that provider authenticates you and shares limited account information with us under their terms and yours.
Integration partners: when you choose to connect music accounts, ticket accounts, or similar optional integrations, only the data needed to provide that feature.
Other users: profile fields, taste overlap, and content you choose to make visible according to your privacy settings.
Legal and safety: when required by law or to protect users, our rights, or the public.

Cookies and similar technologies

We use essential cookies and local storage for authentication, security, and preferences. See our Cookie Policy for details.

Retention and security

We retain your data while your account is active and for a limited period afterward as needed for legal, security, and backup purposes. We use industry-standard measures including encryption in transit, access controls, and row-level security in our database. No method of transmission is 100% secure.

Children's privacy

Groupiez is for adults only. You must be 18 or older to create an account. We do not knowingly collect information from anyone under 18. If we learn we have collected such data, we will delete it.

Your rights (GDPR / CCPA)

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, and to opt out of certain processing (including targeted advertising where applicable). To delete your account and associated personal data, use Delete account in Settings in the Groupiez app or on the web. For access, export, or other privacy requests — or if you cannot reach Settings — contact us at the address below.

California residents may also have the right to know what categories of data we collect and to opt out of the “sale” of personal information. We do not sell personal information as defined under CCPA.

Push and email communications

We send push notifications and emails only with your consent, and you can opt out of non-essential messages in app settings. Transactional messages (for example password reset or intro accepted) may still be sent as needed to operate your account, consistent with applicable laws.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version with an updated date and, for material changes, provide additional notice where required.

Contact us

Privacy questions or data requests: privacy@groupiez.live.